~ / search / GHSA-75m3-f4hr-2vh9

GHSA-75m3-f4hr-2vh9

jjson vulnerable to stack exhaustion

Source: GitHub Advisory Database (reviewed) High CVE-2023-35110

Packages

EcosystemPackageAffectedFixed in
Maven de.grobmeier.json:jjson <= 0.1.7 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered jjson through 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted objects that deeply nested structures.

References

External links from the advisory. They lead to third-party sites.